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Exploration Strategy Themes 




♦4 Pursue scientific activities to address 

e. . ' • . . ' .v, . 

fundamental questions about the solar system, 
the universe, and our place in them 

Extend sustained human presence to beyond 
Earth 

Use near Earth destinations to prepare for 
future human and robotic missions to Mars and 
other destinations 

Expand Earth’s economic sphere with direct 
benefits to life on Earth 

Strengthen existing and create new global 
partnerships 

Engage, inspire, and educate the public 



NASA’s Current Uncertain Environment 

President Bush’s Proposal in 2004 

• Design, develop and fly the Shuttle replacement vehicle (Orion: MPCV) by 2015 

• Return to the Moon around 2020 

• Extend human presence across the solar system and beyond (starting with Mars) 

President Obama’s Proposal in 2010: 

• Collaboration with commercial sector to develop and operate “taxi services” to low- 
earth orbit (Shuttle replacement) - SpaceX (Falcon 9), Orbital (Taurus II) and others, 

• Developing technologies vs. developing systems (NACA) etc 

- Fund technology aimed at enabling future deep-space exploration systems including new 
types of rocket engines /propulsion, heavy-lift launch vehicles, fueling spacecraft in orbit (on- 
orbit fuelling stations), etc 

- Enhance robotic exploration of space (including precursors to human missions) 

- Research and development of remote autonomous space factories for in-situ utilization 

• Develop a simplified MPCV vehicle to provide multipurpose utility for space 
explorations. Also, use MPCV as part of the technological foundation for advanced 
spacecraft for future deep space missions. 

• Human exploration to asteroids (2025) and eventually Mars (2030s) 

• Foster more International collaboration on future missions/projects (e.g. ISS) 

• Initiate development of a heavy-lift launch vehicle in 2013 
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Upper Stage 
(1 J-2X) 

280k lb LOx/LH 2 


5-Segment 
Reusable Solid 
Rocket Booster 
(RSRB) 


Space Shuttle 

Height: 184.2 ft 
Gross Liftoff Mass: 4.5M lb 


Ares I 

Height: 321ft 

Gross Liftoff Mass: 2.0M lb 


Crew 


Lander 


S-IVB 

(1 J-2 engine) 

240k lb Lox/Lh^ 


S-ll 

(5 J-2 engines) 

IMIb LQx/Lh^ 


S-IC 
(5 F-1) 

3.9M lb LQx/RP 


V 


Saturn V 

Height: 364 ft 
Gross Liftoff Mass: 6.5Mlb 


Dragon 

Volume: 245 ft 3 (pressurized) 
Payload Up Mass: 13Klbm 
Up to 7 crewmermbers 


1 

2 nd Stage 
(1 SpaceX Merlin) 
LQx&RP-l 


1 st Stage 

(9 SpaceX Merlin) 
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Falcon 9 

Height: 180 ft 
Gross Liftoff Mass: 0.7M lb 


55k Ibmto LEO 


48k Ibmto LEO 


99k Ibm to TLI 
262k Ibmto LEO 


23k Ibm to LEO 
10k Ibmto GTO 
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Risk Management Paradigm 




Sources of Risk 



External 

Events 



Human 

Errors 
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Institutional 

Failure 




RM Tools & Techniques 


QUANTITATIVE 

♦ Stochastic and Deterministic Modeling 

■ Probabilistic Risk Assessments (PRA) 

■ Other Statistical based Modeling and Analysis techniques 

♦ Cause & Effects Analysis 

■ Failure Modes & Effects Analysis (FMEA) & Failure Modes, Effects & Criticality Analysis 
(FMECA) 

■ Fault Tree Analysis (FTA) 

♦ Systems Engineering Analysis and Risk Assessments 

QUAUTITATIVE 

♦ Root Cause Analysis 

♦ Hazard Analysis 

♦ Brainstorming 

♦ Process Mapping and Analysis (Human Factor 

♦ Taxonomy-Based Questionnaires 

♦ 

♦ Affinity Group 



Enterprise Risk Management 

♦ Primary purpose of ERM is to improve the quality of decision-making 

throughout the organization 

■ Help prioritize strategic and operational decisions 

■ Ensure planned objectives & missions are fully achieved 

■ Synthesize projects and allocate risk and agency resources optimally 

■ Improve mission & project performance to meet agency goals 

- Projects delivered on time, on budget within requirements/specifications 

♦ Treating risks in a holistic manner 

■ Managing all risks and their interactions effectively (not just within silos). Done at 
the agency level not just at the traditional project or program level 

- Consistency of risk processes and the mitigation of risks 

- Even seemingly insignificant risks on their own have the potential, as they 
interact with other events and conditions to cause great damage. 

■ Risk management becomes part of overall project management with 
comprehensive, structured and integrated processes 

■ Integrated and synthesize Risks & Opportunities, Contingency Planning, Crisis 
Management, Continuity of Operations, Disaster Recovery, etc. 

■ Facilitate structured communications throughout the organization and with all 
stakeholders (internal & external) - avoid filtering of information 



Risk Management Implementation 

Strategy 

♦ Covers all phases of the life cycle 

♦ Provide a risk management communication infrastructure to store, analyze and 
deal with problems proactively — overlay on existing management infrastructure 

■ Deploy the risk process, tools and systems within the whole enterprise and integrate 
with other management systems (integrate risk management with other 
programmatic functions, including safety & mission assurance, system engineering, 
analysis and project control/cost & schedule) and also within 
contractors/subcontractors and supplier base. 

♦ Require risk identification and management to occur in a tiered, integrated, 
structured manner 


■ Remove roadblocks preventing entry into risk management system (ensure risk 
management accessible to all levels of the organization) 

■ Analyze and individually quantify the risk consequence categories (e.g., Safety, 
Performance, Schedule, & Cost) for comprehensive understanding of risk impacts - to 
aid in risk prioritization 

■ Analyze how individual risks aggregate or are interrelated. Look for systemic 
problems and overall trends. 

■ Manage risks by developing comprehensive risk handling/mitigation strategies (assign 
resources based on prioritization) & then monitor/control (include all necessary 
stakeholder assistance to ensure comprehensive closure) - prepare fall-back plans 

■ Accountability - assign risk ownership to the individual best suited to effectuate 
effective closure (usually the technical expert). Risk owner is responsible for 
shepherding the risk through closure and coordinating with all players. 

■ Dissenting opinions are encouraged - they are documented and evaluated within the 
standard risk processes 
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Risk Management Implementation 

Strategy 

♦ Prioritize and escalate risks appropriately, only escalate issues that need 
resolution from above 

■ Prioritization includes Cost/Benefit Analysis of mitigation 

■ Information is flowed up, resources and prioritizations are flowed down, while 
coordination is made with all responsible stakeholders 

■ Manage risks at the lowest level possible where the subject matter experts are and 
where it is the easiest to implement risk mitigation strategies and monitor its 
effectiveness 

■ Ensure that risks receive the appropriate level of management review and resources 
to effectively mitigate significant threats as early as possible (as cheaply as possible). 
Risks will be presented at each management level 

♦ Criteria for Risk escalation (to the next level): Risks should be elevated to the next 
level control board for discussion if: 

■ A decision is needed by the next level management or higher 

■ Additional resources are required to effectively mitigate the risk 

■ Coordination/Integration is needed with other organizations/stakeholders outside 
the current level 

■ Awareness or visibility by the next level management or higher is generally needed 

♦ 

effectiveness of controls to manage risk 
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Organizational Culture & Risk 

Management 


♦ Organization's culture not only consists of interlocking set of goals, roles, processes, 
values, communications practices, attitudes and assumptions, but also many nebulous 
and dynamic elements 

■ Changing organizational culture is one of the most difficult things to change 


♦ 


Fundamental elements in changing organizational culture 

■ Where are you now: understand the current culture. 

■ Where do you want to be: decide where it wants to go, define its strategic direction, 
and decide what the organizational culture should look like to support success. What 
vision does the organization have for its future and how must the culture change to 
support the accomplishment of that vision? 

■ Is there a road there: the organization's people must decide to change their 
behavior to create the desired organizational culture. 

- Cognitive - people must have some understanding of why the change in strategy or in 
culture is needed. 


- Limited resources - inevitably, changing an organization will require shifting resources 
away from some areas and towards others (institutional politics). 

- Motivation - ultimately, workers have to want to make the change 
(incentives/disincentives). 
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Risk Coordination and Integration 




System Managers 


Team Members 
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LIKELIHOOD RATING 


Qualitative: Likcjy to occur. 


Quantitative: 1 :1: " 1 - P |for risks with primary ir^ipact or human safety' I or P>50% 
[for nsks with pnmary impact or. cost, schedule, or pcnomiancc| 


Qualitative: Probably ’"ill occur. 

C-janha- vc: 10'^ -cP^TO'^ (for nsks with primary impact on human scttlyl or 
33%<P^50% (for nsks with primary mpad an co-si, schedule, or performance; 


Quo itathe: May occur. 


Quantitative: ' 0'^ -= D < 10"* ;tar risks with primary impact on numan safety; or 
r 0 : - -.■■■■ P-^33% far risks with pnmory impact on cost, schedule, or performance) 


Qua dative: Unlikely to occur 


Quantitative: IC'^ 1 - far risks with onmary impact on human safety) ar 

' Pzil 1 CfJn |far nsks with pr mary impact ar. cost, schedule, ar performance! 


Qualitative: Occurence impraoo-ble. 


Quantitative P^J C'^ |for risks with primary impact or human, safety! or 
P<1% ftar nsks with primary imped an cos", schedule, or performance; 
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TIM EF RAMI 


Near 

0 to G months 

Mid 

3 to 9 month 5 

Far 

> 9 months 


Time "bo Initiate 
Ho nd ting Strategy 


Conseqeuence 1 

Rating Very Low 


Person net 


A condition that 1 could cause- the 
nsed tar minor first aid treatmenf 
though would not adversely aftsd 
personal safety on health 
i Class IV) 


A condition that may cause 
minor injury or occupational 
illness. 

(Class iy; 
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Moderate 


A condition that may cause severe 
injury or occupational illness 
(Class II) 


A condition thal may cause 
permanently disabling injury 
(Class l-B) 


Very High 


A condition thar may cause beata or 
tass of crew 
! Class I- A} 


3 


Facilities, 
Equipment, or 
Other Assets 


A condition that subjects 
facilities, equipment, or flight 
Hardware to more than 
normal wear and -ear (Class IV) 


A condition that may cause 
minor property damage to 
facilities, systems, equipment, 
or flight hardware | Class III) 


A condition that may cause major 
properly dan 1 age to facilities, 
systems, equipment, or flight 
hardware (Class III 


A condition that may cause 
desTucrion of non critical facilities 
or assets 
(Class l-B) 


A condition tha r may cause destruction 
of criti'ca facilities on the ground, 
major systems, or vehicle during the 
mission ('Class I -A) 


Environment 


Negligible OSH A/E PA 
vie tali on - non reportable 


Minor reportable QSHA/EFA 
violation 


Moderate OSHA/EPA violation 
which requires immediate 
remediation 


Major QS HA/E PA violation 
causing temporary stoppage 


Serious or repeat OSHA-ta?A violations 
resulting in action terminating project 


PERFORMANCE 

(Mission Success) 
Including impacts to 
operations and supportability 


Negligible impact to 
requirements, mission 
objectives or technical goals 


Minor Impact fa requirements, 
mission objectives or technical 
goals 


Moderate impact to requirements, 
mission objectives or technical 
goals 


Ma| o r impact to requirements, 
mission objectives or technical 
goals 


Technical goals no? achievable with 
existing engineering capabilities/ 
technologies 


COST 


<51 OOK 

(Negligible impact to bucfget) 


>5 TOOK but <51 M 

(Minor impact ta budget) 


>S1M but <51 0M 
(Moderate impact to budget j 


>51 OM but <$5QM 
(Major in 1 pact ta budge/i 


> S50M 

(Possible project cancellation) 


SCHEDULE 


Negligible schedule impact 


Minor overall schedule impact 
(Accommodate with reserve, no 
impacf to critica- palhf 


c 1 month impact ta critical path/ 
milestones 


> 1 and <5 month impact to 
critical palh/milestones 


>5 month impact to critical path/ 
milestones or possible 
project cancellation 


September 2G06 











Risk Management Lessons Learnt 

Risk management supported by leadership, team members and stakeholders and active 
involvement by all 

■ Uses it and promotes it 

A well defined, structured and understood risk management processes and tools 

■ A formally documented risk management process 

■ Comprehensive and structured risks identification processes and tools (Establish risk 
toolbox for identifying and analyzing risks) 

■ Proper incentives and disincentives to foster good practices 

■ All team-members are expected to participate in risk management 

■ Not overly complex, must be understood and used (minimize overhead & foster 
adherence) 

■ A proactive risk training program 

Continuous and iterative assessment of risks 

■ Provide elements of independence of the risk analysis function from the program/project 

Integrated with program/project decision-making processes (RIDM) 

■ Continuous, event-driven technical reviews (incl project milestones) to help define a 
program that satisfies the customer’s needs within acceptable risk 

■ Continuous prioritization, assessments and mitigation planning and appropriate funding 

Risk management integral to the acquisition process 

A continuous process improvement strategy that monitors an< 
management processes and tools 

Weaving Risk Management into the cultural fabric^ 
difficult 



Summary 

♦ Phased-approach for implementation of risk management is necessary 

♦ Risk management system will be simple, accessible and promote communication 
of information to all relevant stakeholders for optimal resource allocation and risk 
mitigation 

■ Risk management should be used by all team members to manage risks - risk office 
personnel 

■ Each group is assigned Risk Integrators who are facilitators for effective risk 
management 

■ Risks will be managed at the lowest-level feasible, elevate only those risks that require 
coordination or management from above 

♦ Risk reporting and communication is an essential element of risk management and 
will combine both qualitative and quantitative elements 

♦ Risk informed decision making should be introduced to all levels of management 

♦ Provide necessary checks and balances to insure that risks are caught/identil 
and dealt with in a timely manner 

♦ Many supporting tools, processes & training must be deployed 
management implementation 

♦ 
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Questions? 
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